Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
File:                     J39oYmhAcrYqFW3fdd13JcOPUdA.mft (raw, json)
Hash identifier:          EEWYzPhehjoJnmoUMrY2sOCC4vfMMAramgSo6ZwnpzY=
Subject key identifier:   38:A7:D1:BB:FD:3A:1D:CA:9E:5F:81:C5:C6:A0:35:F7:B1:20:08:48
Authority key identifier: 27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0
Certificate issuer:       /CN=A91A0BEC/serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
Certificate serial:       0B3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
Manifest number:          0B2A
Signing time:             Wed 22 Jul 2026 19:38:59 +0000
Manifest this update:     Wed 22 Jul 2026 19:38:59 +0000
Manifest next update:     Wed 29 Jul 2026 19:38:59 +0000
Files and hashes:         1: J39oYmhAcrYqFW3fdd13JcOPUdA.crl (hash: L6Upx5tfus1xMKcADXjk9g9PTDaZw0XOu2cX7gK5/PM=)
                          2: F0EC7AEAE48C11EF8BA4602AC4F9AE02.roa (hash: CCWU/slr79ct4FNV5i0TIXfHecnrZ2GwArH1P9tumgo=)
                          3: 8AAEC8AEE48D11EF98A3562BC4F9AE02.roa (hash: Ela4JYI8D8rs4ZlHfvA7O7Ltq8JCZsgjs+g9KLkdTMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl
                          rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2875 (0xb3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0BEC, serialNumber=277F6862684072B62A156DDF75DD7725C38F51D0
        Validity
            Not Before: Jul 22 19:38:59 2026 GMT
            Not After : Jul 29 19:38:59 2026 GMT
        Subject: CN=6a611c53-f49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:11:d5:c2:52:45:5e:3c:86:cd:bc:03:cd:
                    f1:39:dc:d7:1e:46:6e:97:75:45:39:d2:e7:11:10:
                    94:fe:4c:43:ad:4d:01:7e:47:c2:fd:ca:7f:54:72:
                    3e:e1:e8:7b:ca:6c:35:84:fe:d9:04:14:48:b4:3c:
                    87:e1:d6:67:ee:96:7c:63:63:e4:3b:29:8f:95:8c:
                    44:c1:11:c0:32:df:3b:9c:5b:1b:55:9d:88:2d:89:
                    10:a5:1d:7f:38:d7:a8:32:65:88:36:1c:cf:0f:ca:
                    c0:5f:be:ce:0f:8f:7f:e6:1f:9e:0c:5c:ee:44:3a:
                    47:0d:50:51:e4:a7:b7:d1:f4:55:4c:ca:f2:f2:2a:
                    13:64:fa:fa:35:06:e9:c6:c3:f3:a3:6b:1e:71:1e:
                    ca:ba:d7:5a:55:63:9a:be:75:13:e6:7f:3e:85:fd:
                    c5:27:7d:73:e5:f5:54:71:66:fd:9b:94:d6:cb:f9:
                    1a:d7:d9:38:63:67:e2:1c:cf:91:6b:58:bd:6c:f0:
                    ac:b2:21:37:d5:e0:f6:aa:e6:3d:d7:55:23:97:90:
                    3b:46:96:09:9a:64:ca:4d:19:a0:5f:09:20:6b:ba:
                    b8:d2:fc:6d:a0:f7:cb:b1:0e:cf:37:b0:3a:fb:20:
                    3a:ba:d4:51:6d:35:d0:d6:b1:97:dc:b1:cf:68:39:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A7:D1:BB:FD:3A:1D:CA:9E:5F:81:C5:C6:A0:35:F7:B1:20:08:48
            X509v3 Authority Key Identifier:
                keyid:27:7F:68:62:68:40:72:B6:2A:15:6D:DF:75:DD:77:25:C3:8F:51:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J39oYmhAcrYqFW3fdd13JcOPUdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0BEC/7B7F28E2677E11EA8BD8262DC4F9AE02/J39oYmhAcrYqFW3fdd13JcOPUdA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:75:11:33:6a:47:d8:cf:28:f8:cd:0f:39:0d:76:9b:01:fb:
         d8:d9:bc:ab:f4:c9:69:82:a3:1b:84:27:9c:2e:22:b2:68:3f:
         f7:1f:e4:60:be:03:07:be:41:88:b4:5a:91:d2:4f:96:d2:d9:
         37:9a:de:4a:1f:cf:c8:d0:f3:69:c5:44:8f:72:9c:db:9c:01:
         d3:2d:f9:f5:85:ad:af:ff:85:0f:af:e9:77:71:6e:3f:4b:10:
         c2:48:10:cb:6c:da:28:e9:73:01:5d:0e:f9:47:81:39:c9:e8:
         74:de:37:e3:68:11:69:cc:b7:3f:6d:c0:79:57:24:13:1e:0f:
         c9:43:18:27:ab:88:2e:63:8a:cf:0e:0f:c2:5a:a9:43:97:fe:
         aa:60:e8:71:81:45:73:a5:77:70:79:81:5f:a0:1e:16:ca:43:
         55:84:1b:51:89:98:9b:e6:63:50:9e:ff:48:32:24:91:17:e2:
         9d:c0:0c:3b:e7:40:ae:5d:9c:7b:ee:22:3c:b1:a6:3b:26:1d:
         44:46:4d:99:b2:a1:14:55:f6:31:2f:5e:fb:8c:87:03:c6:2b:
         1f:81:fa:ed:ca:3d:ea:0c:f1:af:6a:02:31:29:85:f1:37:fb:
         bd:2e:49:08:80:2d:78:c6:c0:a9:e0:e8:16:54:e1:50:c0:b9:
         8b:8e:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:03 2026 by rpki-client